Kelly Mercier-White created CAY-2893:
----------------------------------------

             Summary: Update velocity-engine-core dependency
                 Key: CAY-2893
                 URL: https://issues.apache.org/jira/browse/CAY-2893
             Project: Cayenne
          Issue Type: Improvement
            Reporter: Kelly Mercier-White


The current velocity-engine-core version pulls a vulnerable commons-io package. 
Upgrading velocity-engine-core to 2.4.0/2.4.1 would resolve this.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to